1. Data controller
The data controller is: Alena Müllerová
Company ID (IČO): 14289938
Registered office: Na Hůrkách, 262 03 Nový Knín
E-mail: kralovskalevandule@seznam.cz
Phone: +420 775 697 774
Website: www.kralovskalevandule.cz
(hereinafter referred to as the “controller”)
The controller has not appointed a data protection officer, as this obligation does not arise under the GDPR in this case.
2. What personal data we process and why
a) Visiting the website
When you visit our website, we process technical data, in particular:
IP address (in anonymised form), information about your device and browser, date and time of access, pages visited.
Purpose: to ensure the proper functioning, security and improvement of the website.
Legal basis: legitimate interest of the controller.
b) Contact form
When you use the contact form, we process: first and last name (if provided), e-mail address, and the content of your message.
Purpose: to handle your enquiry and follow-up communication.
Legal basis: performance of a contract or steps prior to entering into a contract, or legitimate interest.
Data are kept only for as long as necessary to handle the enquiry.
c) E-shop – purchase of goods
When you purchase through the e-shop operated on the Shoptet platform, we process: name and surname, billing and delivery address, e-mail, telephone number, and order and payment details.
Purpose: conclusion and performance of the purchase contract, delivery of goods, accounting and compliance with legal obligations.
Legal basis: performance of a contract and compliance with legal obligations.
Data are retained for the period required by law (in particular accounting and tax legislation).
d) Customer account
If a customer creates an account, we process the data provided at registration and data relating to orders.
Purpose: to manage orders and make shopping easier.
Legal basis: performance of a contract.
The account may be cancelled at any time upon the customer’s request.
3. Recipients of personal data
Personal data may be disclosed to: the operator of the Shoptet e-shop platform, payment service providers, carriers delivering the goods, and accounting and tax advisers.
The operator of the Umami analytics tool may receive technical data related to visits to the website as described in the analytics section below, but only if the visitor has consented to analytics.
Personal data are not transferred outside the EU/EEA.
4. Cookies, local storage and analytics
In addition to storing your consent, we use the Umami tool for anonymous traffic measurement after you give consent.
a) Essential consent storage
We store your cookie / analytics preference in browser storage (localStorage) so it is remembered across visits.
Legal basis: necessary technical interest for a working website and to demonstrate consent settings.
The analytics script (Umami) is loaded only after you explicitly accept it in the banner or enable analytics in the footer settings.
b) Analytics — Umami
After you give consent, the Umami script may be loaded. It collects browsing data within the scope described in Umami’s documentation (typically page URL and title, referrer, browser language, screen resolution, and related technical data).
Purpose: to understand how the website is used and to improve content and features.
Anonymous events may also be recorded when you click selected links or buttons (not linked to your name, e-mail, or contact form message content).
We do not use the “Distinct ID” feature or other identifiers that would directly identify you (such as your e-mail address) — this is aggregate visit analytics.
Legal basis: consent given in the cookie banner or in the footer cookie settings.
You may withdraw consent at any time under “Cookie settings” in the footer; after disabling analytics the script will not load again (you may need to refresh the page). We also respect the browser “Do Not Track” signal where Umami’s configuration supports it.
5. How long we retain data
contact form data: for as long as necessary to handle the enquiry,
order data: for the period required by law,
analytics data (Umami): for the period determined by the Umami service operator and the settings of our account with that service.
6. Rights of data subjects
You have the right:
of access to your personal data,
to rectification or completion of data,
to erasure (where permitted by law),
to restriction of processing,
to data portability,
to object to processing,
to withdraw consent at any time (where processing is based on consent).
7. Complaint to a supervisory authority
If you believe that your data are not processed in accordance with the law, you have the right to lodge a complaint with:
the Office for Personal Data Protection (Úřad pro ochranu osobních údajů)
Pplk. Sochora 27, 170 00 Prague 7, Czech Republic
www.uoou.cz
8. Contact
For questions about personal data protection, contact us at: kralovskalevandule@seznam.cz